PSP License in Cyprus: Navigating the 2026 Regulatory Shift
Secure Your Gateway to the EU Payment Ecosystem
Obtaining a PSP license Cyprus has entered a robust new era following the 2025-2026 regulatory updates. With the provisional political agreement on PSD3 (Third Payment Services Directive) and PSR (Payment Services Regulation) now in effect, the Central Bank of Cyprus (CBC) mandates a “future-proof” application architecture for all new entrants.
In the current landscape, securing a PSP license in Cyprus requires more than a standard filing; it demands an operational design built for Instant Payments Regulation (IPR) and the mandatory Verification of Payee (VoP) scheme. At CX Financia, we don’t just submit documents; we architect resilient payment institutions ready for the post-2027 harmonized EU landscape.
PSP vs. EMI: Selecting the Optimal Licensing Tier for Your Business Model
Understanding the distinction is critical for your capital efficiency. While both are regulated by the CBC, their scopes differ significantly:
2026 Strategy Note: Under PSD3, PI and EMI licenses will begin a unification process. We help you choose the tier that maximizes your ROI today while ensuring a smooth “grandfathering” transition in 2027. Review our AIFM licensing expertise if your business model also involves fund management.
The CBC “Suitability Directive”: New Governance & Board Requirements
As of the latest 2025 Suitability Directives (ΚΔΠ 120/2025), the CBC has significantly increased the bar for Board expertise. To pass the regulatory compliance hurdle, your firm must demonstrate:
The 5-Director Mandate:
Typically requires at least 2 Executive (local) and 3 Non-Executive directors.
Local Substance:
The two Executive Directors must be Cyprus residents with proven “4-Eyes” experience in fintech or banking.
AML Board Expertise:
A designated Board member must now possess specific expertise in AML/CTF risk assessment, a core component of our AML/CFT compliance services.
DORA for Payment Providers: Securing Your Digital Operational Resilience
The Digital Operational Resilience Act (DORA) is now a live enforcement priority. Your PSP application must include an ICT Risk Framework where the Board takes full accountability for digital risks. Furthermore, under CySEC Circular C751, entities must now prove their ability to classify and report major ICT incidents within strict timeframes.
Ensuring your firm is “resilient by design” is part of our internal audit support, protecting your license from operational failures.
Minimum Capital Requirements (2026 Breakdown)
The initial capital must be fully paid up and blocked in a local bank account during the application review.
- €20,000: For Money Remittance services only.
- €50,000: For Payment Initiation Services (PISP).
- €125,000: For Full Payment Services (Execution of transactions, Acquiring, and Issuing).
The CBC Licensing Roadmap: A 9-Month Strategy
While the market average for a PSP license is 12–14 months, our Pre-Audit System aims for a 9-month window by eliminating common CBC queries before they happen.
Phase 1: The “Substance” Build (Months 1-2)
- Incorporating your Cyprus Company and recruiting the Compliance Officer and Risk Manager.
- Drafting the Program of Operations and 3-Year Business Plan including the 2025/26 Verification of Payee (VoP) technical workflows.
Phase 2: Regulatory Submission & Banking Access (Months 3-8)
- Direct liaison with the Central Bank of Cyprus.
- Safeguarding Expertise: We assist in the most difficult hurdle—opening safeguarding accounts with Tier-1 banks to hold client funds.
Phase 3: Activation & 2027 Grandfathering Preparation (Month 9+)
- Final capital injection and activation of your passport to serve all 27 EU member states. If your firm also handles crypto rails, we align this with MiCA licensing readiness.
Why CX Financia? Architecting High Substance Payment Businesses
Most firms treat PSP applications as a document-filling exercise. We treat it as an institutional build.
PSD3 Readiness:
We align your 2026 application with the Payment Services Regulation (PSR) standards, ensuring your business is ready for the unified regime without costly retrofitting.
We align your 2026 application with the Payment Services Regulation (PSR) standards, ensuring your business is ready for the unified regime without costly retrofitting.
MiCA Integration:
For firms handling fiat-to-crypto rails, we manage the dual-licensing overlap between
For firms handling fiat-to-crypto rails, we manage the dual-licensing overlap between
Ready to Launch Your Payment Institution?
Don’t let regulatory delays stall your market entry. Speak with our CBC licensing specialists today to determine your optimal capital tier and DORA readiness.
FAQ – Cyprus PSP Licensing
What is Verification of Payee (VoP) and is it mandatory for new PSPs?
Yes. Since October 2025, it is a mandatory requirement. Your system must verify that a payee’s name matches their IBAN in real-time. For technical details, refer to the European Payments Council (EPC) VoP Rulebook.
What is the "4-Eyes" principle for PSPs?
The CBC requires that at least two qualified individuals effectively direct the business from Cyprus. They must be independent, fit-and-proper, and reside locally. You can find more on director suitability at the Central Bank of Cyprus official portal.
Can I use my 2026 PSP license to offer services in other EU countries?
Absolutely. Once authorized by the CBC, you can use the “Passporting” mechanism to offer services across the EEA. We handle the notification process for your target markets.